this post was submitted on 19 Sep 2026
35 points (100.0% liked)

Fediverse

44085 readers
1615 users here now

A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, Mbin, etc).

If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!

Rules

Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration)

founded 3 years ago
MODERATORS
 

I made my admin account, but I can still accept /setup which looks like it will allow any random user to make an admin account as well.

How do I fix this?

Edit: It turns out that creating the admin account doesn't work, even though the page is still there.

top 8 comments
sorted by: hot top controversial new old
[–] one_old_coder@piefed.social 8 points 1 week ago (1 children)
[–] vercetti@lemmy.world 7 points 1 week ago (2 children)
[–] one_old_coder@piefed.social 10 points 1 week ago* (last edited 1 week ago)

I don't see any guide talking about that. I would try some kind of Htaccess to prevent people from using /setup.

It feels like a bandaid, but on the other hand I have never seen a "server application" where URLs like /setup can selfdestruct after one use.

[–] OpenStars@discuss.online 0 points 1 week ago

You might try PieFed's setup process also - its reputedly very streamlined.

[–] hexagonwin@lemmy.today 2 points 1 week ago* (last edited 1 week ago)

even lemmy.ml operated by its devs have /setup exposed and not working, i think its fine

if it bothers you block or redirect the url on your web server's config

[–] Die4Ever@retrolemmy.com 2 points 1 week ago

I don't think it does anything once the first admin account is created

[–] frongt@lemmy.zip 2 points 1 week ago (1 children)
[–] vercetti@lemmy.world 2 points 1 week ago

Thanks. I just tried it out and it actually doesn't work. The page is still there which is annoying, but at least it can't be exploited to give random people admin accounts.